Advisories · Technology
seraphinitesoft Seraphinite Accelerator.
Every CVE that names seraphinitesoft Seraphinite Accelerator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Seraphinite Accelerator <= 2.29.24 - Unauthenticated Sensitive Information Exposure in Object Cache Directory
- seraphinitesoft Seraphinite Accelerator
- Information disclosure
- CVSS 6.1 Medium
Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting
- seraphinitesoft Seraphinite Accelerator
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Seraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor
- seraphinitesoft Seraphinite Accelerator
- Information disclosure
- CVSS 4.3 Medium
Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing
- seraphinitesoft Seraphinite Accelerator
- Broken access control
- CVSS 4.3 Medium
Seraphinite Accelerator <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions
- seraphinitesoft Seraphinite Accelerator
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
- seraphinitesoft Seraphinite Accelerator
- Server-side request forgery (SSRF)